Hi Debbie, A couple of things on the "specify credentials" control. 1. There is (was ?) a draft from Rob Weltman for what he calls a "proxy control" (draft-weltman-ldapv3-proxy-02.txt). There seems to be some overlap here. 2. How will the access control model determine whether a user has the right to proxy or not ie. use the "specify credentials control" ? Rob. --iPlanet Directory Group